$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: fIZWQh1tdlAFlU9rUgGzJBJIwJlZXiFY42XDdlkvnnQ= Subject key identifier: 1A:77:25:F8:1B:51:7C:6F:06:5C:D1:09:94:5F:0F:73:B0:CB:2C:B3 Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 34DFDEBE508C08D9859A15BE85D9A88391FA326D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: F0 Signing time: Sun 01 Mar 2026 04:42:41 +0000 Manifest this update: Sun 01 Mar 2026 04:37:41 +0000 Manifest next update: Wed 04 Mar 2026 16:21:41 +0000 Files and hashes: 1: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: fjDL5nvKbYQmEUXQPWXGIc5H7qOcPNhgeOqd090lcc0=) 2: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 4bpu+mggFbzvJDFJ5R6f3m5fTkhrxUM9zXGsoRvy4HQ=) 3: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: 7y8609J4YjMYC9wN+hYXRDhk/NJUcPM91RuRT+GB4pQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:df:de:be:50:8c:08:d9:85:9a:15:be:85:d9:a8:83:91:fa:32:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Mar 1 04:37:41 2026 GMT Not After : Mar 4 16:21:41 2026 GMT Subject: CN=1A7725F81B517C6F065CD109945F0F73B0CB2CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:78:e8:9a:7e:59:e3:0e:33:a3:e3:f1:8e:f9: 44:97:74:79:0e:71:71:e2:f8:de:08:52:92:c1:9c: f2:54:36:92:8b:ec:c3:cf:af:55:72:29:d1:f7:41: 46:24:f1:69:1b:44:bc:7f:41:44:96:2f:e8:25:57: a0:bd:56:b8:2d:96:f7:f0:cc:22:f0:47:35:27:75: a5:cc:93:0c:38:84:61:b9:e6:04:5d:8b:bb:2b:ae: da:52:2f:27:49:a7:5b:a7:28:18:43:62:8e:e3:fe: 14:ee:1d:d2:2d:6a:46:7a:f8:ef:e8:23:0b:af:83: 02:b0:94:d5:75:4a:34:fa:a2:3a:09:33:77:7f:64: e8:d7:f1:1a:d9:42:b0:89:e6:02:d3:a9:3b:bc:cf: 23:f2:02:9b:39:57:5f:28:4c:89:d9:fa:5a:82:de: 77:68:0c:1f:e6:a9:00:9d:08:98:85:31:6b:3d:cf: 28:f1:87:eb:ac:66:6e:68:79:97:7a:a2:82:42:f7: f1:1b:0e:87:23:1f:ba:24:76:1c:80:a4:bd:6a:a8: ef:94:bb:a2:f9:2a:5e:62:68:87:fe:f2:6e:49:d1: 19:4a:33:50:bd:bd:aa:dd:b5:61:47:c5:2d:d1:86: 52:0c:5e:9d:eb:81:ee:88:ca:cf:d7:e9:df:41:01: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:77:25:F8:1B:51:7C:6F:06:5C:D1:09:94:5F:0F:73:B0:CB:2C:B3 X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:73:f7:73:f1:f8:f1:be:ca:ee:cc:7b:b6:90:3c:f2:d8:01: 92:92:79:9d:5d:6e:64:a5:36:a5:10:09:5a:9c:93:10:2c:75: 0d:c9:5e:46:28:35:a9:d0:e4:5b:1d:e2:65:db:c4:ba:04:9d: fb:4a:72:55:03:81:fd:b5:56:11:74:99:b4:12:ba:d7:a6:8e: fb:04:64:ea:69:de:01:d8:bb:14:47:f9:9b:0a:5a:87:f4:4d: d3:09:ab:22:3c:07:2b:86:16:b5:b9:f0:a1:92:e1:8a:8d:62: 36:b2:6f:33:04:35:a6:4a:61:f9:14:f9:2f:ed:1a:e5:96:2b: 00:cf:f8:89:f6:3c:e0:9b:1c:dd:6b:e8:02:d1:e4:7c:fe:37: bd:3e:68:d9:32:b8:df:dc:c4:b3:dc:a3:25:5b:53:2b:60:84: 9a:53:b9:a3:37:1d:c1:78:80:9e:36:fb:c7:55:86:29:c7:1e: a3:9d:1e:9c:c6:13:61:fb:5d:21:8a:0d:95:6f:04:f6:ff:6a: 5e:d6:40:79:2a:29:28:83:c8:8a:e7:c5:cd:65:b3:94:ea:98: 76:f4:14:88:f9:b9:bb:77:79:73:78:5b:75:cb:b7:44:c8:a4: 3d:33:71:d3:1b:d6:ae:a2:6c:c6:9a:fc:bd:ea:da:8e:3a:df: 4f:5c:27:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNN/evlCMCNmFmhW+hdmog5H6Mm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNjAzMDEwNDM3NDFaFw0yNjAzMDQxNjIxNDFaMDMxMTAvBgNV BAMTKDFBNzcyNUY4MUI1MTdDNkYwNjVDRDEwOTk0NUYwRjczQjBDQjJDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDheOiaflnjDjOj4/GO+USXdHkO cXHi+N4IUpLBnPJUNpKL7MPPr1VyKdH3QUYk8WkbRLx/QUSWL+glV6C9Vrgtlvfw zCLwRzUndaXMkww4hGG55gRdi7srrtpSLydJp1unKBhDYo7j/hTuHdItakZ6+O/o IwuvgwKwlNV1SjT6ojoJM3d/ZOjX8RrZQrCJ5gLTqTu8zyPyAps5V18oTInZ+lqC 3ndoDB/mqQCdCJiFMWs9zyjxh+usZm5oeZd6ooJC9/EbDocjH7okdhyApL1qqO+U u6L5Kl5iaIf+8m5J0RlKM1C9vardtWFHxS3RhlIMXp3rge6Iys/X6d9BAZZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGncl+BtRfG8GXNEJlF8Pc7DLLLMwHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERz93Px+PG+yu7Me7aQPPLYAZKSeZ1dbmSl NqUQCVqckxAsdQ3JXkYoNanQ5Fsd4mXbxLoEnftKclUDgf21VhF0mbQSutemjvsE ZOpp3gHYuxRH+ZsKWof0TdMJqyI8ByuGFrW58KGS4YqNYjaybzMENaZKYfkU+S/t GuWWKwDP+In2POCbHN1r6ALR5Hz+N70+aNkyuN/cxLPcoyVbUytghJpTuaM3HcF4 gJ42+8dVhinHHqOdHpzGE2H7XSGKDZVvBPb/al7WQHkqKSiDyIrnxc1ls5TqmHb0 FIj5ubt3eXN4W3XLt0TIpD0zcdMb1q6ibMaa/L3q2o46309cJyA= -----END CERTIFICATE-----Generated at Mon Mar 2 14:58:21 2026 by rpki-client